The Agent Skills Directory

[COMMAND_EXECUTION]: The skill is vulnerable to Cross-Site Scripting (XSS) due to unsafe DOM manipulation in the webview.
Ingestion Point: The assets/webview.html file retrieves user-influenced data (type, scope, message) from URL parameters.
Vulnerable Code: In assets/webview.html, the script uses line.innerHTML = type + '(<span class="scope">' + scope + '</span>): ' + message; to display the commit message.
Impact: Since the message and scope variables are derived from the user's change description, an attacker could provide a description that results in the execution of arbitrary JavaScript (e.g., using <img src=x onerror=...> or <script> tags) within the webview context.
Mitigation: Replace innerHTML with textContent for the type and message variables, or use a sanitization library to ensure no executable HTML is injected.

commit-message